Free Microsoft 365 Security Self-Assessment Tool

Are you responsible for Microsoft 365 and not sure where your tenant stands with identity, email, sharing, Teams, endpoints, audit logs, backup, and security monitoring? Use this guided self-assessment to identify gaps, prioritize work, and generate a practical report in about 10 to 15 minutes.

MFA & identityExchange & DefenderSharePoint, Teams & backup
Start the Microsoft 365 ReviewAsk IT Perfection for Help

What this tool does

Review Microsoft 365 security, operations, and recovery readiness in one structured report.

This self-assessment is built for IT administrators, IT managers, security managers, CISOs, office managers, and business technology leaders responsible for Microsoft 365. Start by choosing your role, then select the Microsoft 365 areas and service responsibilities you manage.

At the end, you receive a dashboard, tenant security score, prioritized findings, recommended technical actions, and direct learning links to IT Perfection encyclopedia pages that match weak or uncertain answers.

Need help beyond the self-assessment? IT Perfection helps businesses operate and support Microsoft 365, while OC Security Audit provides independent Office 365 and Microsoft 365 security audit services. Review related guidance on Microsoft 365 security configuration, monthly Microsoft 365 security reviews, Defender for Office 365 security, Microsoft Office 365 full audits, Microsoft 365 security risk checks, and Microsoft 365 email security services.

What you will answer

MFA, Conditional Access, privileged roles, Exchange Online, Defender for Office 365, SharePoint, OneDrive, Teams, Intune, backup, audit logs, and evidence readiness.

What you will receive

An executive-friendly score, category risk bars, high-priority task list, remediation roadmap, and links to relevant ITperfection.com learning resources.

How long it takes

Most teams can complete a useful first pass in 10 to 15 minutes. A deeper review may take longer if you verify answers against systems while completing it.

Deliverables

The report is designed to become a practical IT work plan.

Risk dashboard

Overall score, maturity level, category risk, unanswered items, and high-priority issue count.

Findings

Each weak answer becomes a finding with risk, business impact, how to verify it, and recommended action.

Remediation roadmap

Tasks are sorted by priority so owners can start with the items most likely to reduce outages, exposure, or confusion.

Learning links

The tool recommends related IT Perfection pages from the 900-page catalog so your team can learn more about each topic.

Interactive Tool

Build your Microsoft 365 security assessment report.

Start with your Microsoft 365 responsibility, then select the tenant areas and services you manage. The questionnaire will adjust and generate a focused report.

1

What is your Microsoft 365 responsibility?

2

Select related services, systems, and control areas

Choose the Microsoft 365 areas you manage or influence. Include identity, Exchange Online, SharePoint, OneDrive, Teams, Defender, Intune, backup, audit logs, and compliance evidence where applicable.

3

Select management and monitoring responsibilities

Choose the recurring responsibilities you handle, such as operations management, monitoring, patching, backup, security administration, documentation, compliance, vendor coordination, or reporting.

4

Answer the conditional questions

Select at least one system area or service responsibility to load the assessment questions.

5

Generate your report

The report includes a score, maturity level, category risk summary, findings, recommended tasks, and IT Perfection learning links.

Knowledge Base

Search the IT Perfection 900-page learning catalog.

The tool uses these pages to recommend next steps. Search by system, vendor, risk area, keyword, or page title.

900 linked resources
DNS Server Security, Configuration, and Maintenance GuideNetwork Infrastructure, Server Infrastructure • dns server and maintenanceDHCP Server Security, Configuration, and Maintenance GuideNetwork Infrastructure, Server Infrastructure • dhcp server and maintenanceActive Directory Security Hardening GuideIdentity and Access Management • active directory hardeningDomain Controller Security ChecklistIdentity and Access Management • domain controllerGroup Policy Management Best PracticesIdentity and Access Management • group policy managementWindows Server Security Hardening GuideServer Infrastructure • windows server hardeningWindows Server Patch Management GuideServer Infrastructure • windows server patch managementWindows Server Upgrade PlanningServer Infrastructure • windows server upgrade planningFirewall Security Configuration GuideNetwork Infrastructure • firewallFirewall Rule Review and CleanupNetwork Infrastructure • firewall rule review and cleanupSite-to-Site VPN Security GuideNetwork Infrastructure • site to site vpnEnd-User VPN Security GuideNetwork Infrastructure • end user vpnDMZ Network Design and SecurityNetwork Infrastructure • dmz network design andBusiness Router Security ConfigurationNetwork Infrastructure • business routerBusiness Switch Security ConfigurationNetwork Infrastructure • business switchVLAN Design and Security GuideNetwork Infrastructure • vlan design andNetwork Segmentation StrategyNetwork Infrastructure • network segmentation strategyWireless Network Security GuideNetwork Infrastructure • wireless networkMicrosoft 365 Security Configuration GuideMicrosoft 365 • microsoft 365Exchange Online Security Best PracticesMicrosoft 365 • exchange onlineSPF, DKIM, and DMARC ConfigurationIT Operations and Cybersecurity • spf dkim and dmarcMicrosoft Defender for Office 365 ConfigurationMicrosoft 365 • microsoft defender for office 365Entra ID Security ReviewMicrosoft 365 • entra id reviewAzure Security Baseline GuideMicrosoft Azure • azure baselineAzure Conditional Access PoliciesMicrosoft Azure • azure conditional access policiesMicrosoft Intune Device ManagementMicrosoft 365 • microsoft intune device managementVMware ESXi Host Security HardeningVirtualization • vmware esxi host hardeningVMware vCenter Server Appliance SecurityServer Infrastructure, Virtualization • vmware vcenter server applianceVMware Snapshot Best PracticesVirtualization • vmware snapshotHyper-V Security GuideVirtualization • hyper vNAS Security Configuration GuideIT Operations and Cybersecurity • nasSAN Storage Security GuideIT Operations and Cybersecurity • san storageShared Folder Access ControlIT Operations and Cybersecurity • shared folder access controlNTFS Permission ReviewIT Operations and Cybersecurity • ntfs permission reviewBackup Strategy for Business NetworksBackup and Disaster Recovery, Network Infrastructure • backup strategy for business networksImmutable Backup Best PracticesBackup and Disaster Recovery • immutable backupDisaster Recovery RunbookBackup and Disaster Recovery • disaster recovery runbookEndpoint Detection and Response GuideEndpoint Security • endpoint detection and responseBitLocker Encryption ManagementEndpoint Security • bitlocker encryption managementData Loss Prevention GuideIT Operations and Cybersecurity • data loss preventionWordPress Security HardeningWeb and Application Security • wordpress hardeningCloudflare WAF ConfigurationWeb and Application Security • cloudflare wafWebsite Security Best PracticesWeb and Application Security • websitePublic-Facing Server SecurityServer Infrastructure • public facing serverServer Room Physical SecurityPhysical and IoT Security, Server Infrastructure • server room physicalIT Documentation ChecklistIT Operations Management • it documentationNetwork Documentation ChecklistIT Operations Management, Network Infrastructure • network documentationVulnerability Management Program GuideVulnerability Management • vulnerability management programSecurity Awareness Training ProgramIT Operations and Cybersecurity • awareness training programCIO Checklist for Small BusinessesIT Operations and Cybersecurity • cio for small businessesTwo-Factor Authentication and MFA Security GuideIdentity and Access Management • two factor authentication and mfaPrivileged Account Management GuideIdentity and Access Management • privileged account managementService Account Security Best PracticesIdentity and Access Management • service accountWindows LAPS Configuration and Security GuideIdentity and Access Management • windows laps andLocal Administrator Rights Removal GuideCompliance and Audit Readiness • local administrator rights removalRemote Desktop Protocol Security GuideIT Operations and Cybersecurity • remote desktop protocolSQL Server Security Configuration GuideServer Infrastructure • sql serverIIS Web Server Security GuideServer Infrastructure, Web and Application Security • iis web serverIT Asset Inventory Management GuideIT Operations Management • it asset inventory managementIT Change Management Process GuideIT Operations and Cybersecurity • it change management processNetwork Monitoring Best Practices GuideNetwork Infrastructure • network monitoringServer Performance Monitoring GuideServer Infrastructure, Web and Application Security • server performance monitoringMicrosoft Sentinel SIEM Deployment GuideIT Operations and Cybersecurity • microsoft sentinel siem deploymentSyslog Server Configuration and Security GuideNetwork Infrastructure, Server Infrastructure • syslog server andSNMP Security Best Practices GuideNetwork Infrastructure • snmpNetwork Device Configuration Backup GuideBackup and Disaster Recovery, Network Infrastructure • network device backupInternet Circuit Failover Planning GuideIT Operations and Cybersecurity • internet circuit failover planningSD-WAN Readiness and Security GuideNetwork Infrastructure • sd wan readiness andQoS Configuration for Voice and Video GuideIT Operations and Cybersecurity • qos for voice and videoRemote Workforce Security GuideIT Operations and Cybersecurity • remote workforceMobile Device Security GuideEndpoint Security • mobile deviceBYOD Security Policy GuideEndpoint Security • byod policyApplication Allowlisting GuideIT Operations and Cybersecurity • application allowlistingUSB Device Control Security GuideEndpoint Security • usb device controlBrowser Security Configuration GuideEndpoint Security • browserPrinter and Scanner Security GuidePhysical and IoT Security, Vulnerability Management • printer and scannerPatch Management for Third-Party Applications GuideIT Operations and Cybersecurity • patch management for third party applicationsSoftware Inventory Management GuideIT Operations and Cybersecurity • software inventory managementLicense Management GuideIT Operations Management • license managementVendor Access Management GuideIT Operations Management • vendor access managementIncident Response Plan GuideIT Operations and Cybersecurity • incident response planRansomware Readiness GuideIT Operations and Cybersecurity • ransomware readinessCyber Insurance Readiness GuideCompliance and Audit Readiness • cyber insurance readinessAdministrative Security Controls GuideCompliance and Audit Readiness • administrative controlsTechnical Security Controls GuideIT Operations and Cybersecurity • technical controlsPhysical Security Controls GuidePhysical and IoT Security • physical controlsIT Risk Register GuideIT Operations Management • it risk registerIT Budget Planning GuideIT Operations Management • it budget planningIT Vendor Management GuideIT Operations Management • it vendor managementIT Help Desk SLA Management GuideIT Operations Management • it help desk sla managementIT Ticketing System Best Practices GuideIT Operations Management • it ticketing systemQuarterly IT Security Review GuideIT Operations and Cybersecurity • quarterly it reviewAnnual IT Infrastructure Review GuideIT Operations and Cybersecurity • annual it infrastructure reviewIT Maturity Assessment GuideIT Operations Management • it maturity assessmentIT Operations Scorecard GuideIT Operations Management • it operations scorecardMicrosoft Purview DLP Configuration GuideMicrosoft 365 • microsoft purview dlpData Classification Strategy GuideIT Operations and Cybersecurity • data classification strategySensitive Data Discovery GuideIT Operations and Cybersecurity • sensitive data discoveryEmail DLP Controls GuideIT Operations and Cybersecurity • email dlp controlsEndpoint DLP Controls GuideEndpoint Security • endpoint dlp controlsEncryption at Rest GuideIT Operations and Cybersecurity • encryption at restEncryption in Transit GuideIT Operations and Cybersecurity • encryption in transitSSL Certificate Management GuideIT Operations and Cybersecurity • ssl certificate managementActive Directory Certificate Services Security GuideIdentity and Access Management • active directory certificate servicesAzure Key Vault Security GuideMicrosoft Azure • azure key vaultAzure Storage Account Security GuideMicrosoft Azure • azure storage accountAzure Virtual Machine Security GuideMicrosoft Azure, Virtualization • azure virtual machineAzure Network Security Groups GuideMicrosoft Azure, Network Infrastructure • azure network groupsAzure Firewall Security GuideMicrosoft Azure, Network Infrastructure • azure firewallAzure Bastion Security GuideMicrosoft Azure • azure bastionAzure Backup Configuration GuideBackup and Disaster Recovery, Microsoft Azure • azure backupAzure Site Recovery Planning GuideBackup and Disaster Recovery, Microsoft Azure • azure site recovery planningAzure Monitor and Log Analytics GuideMicrosoft Azure • azure monitor and log analyticsAzure Policy and Compliance GuideCompliance and Audit Readiness, Microsoft Azure • azure policy and complianceAzure Landing Zone Planning GuideMicrosoft Azure • azure landing zone planningMicrosoft 365 Tenant-to-Tenant Migration GuideMicrosoft 365 • microsoft 365 tenant to tenant migrationMicrosoft 365 User Offboarding ChecklistMicrosoft 365 • microsoft 365 user offboardingMicrosoft Teams Security GuideMicrosoft 365 • microsoft teamsSharePoint and OneDrive Sharing Security GuideEndpoint Security, Microsoft 365 • sharepoint and onedrive sharingMicrosoft 365 Backup Strategy GuideBackup and Disaster Recovery, Microsoft 365 • microsoft 365 backup strategyMicrosoft 365 Secure Score GuideMicrosoft 365 • microsoft 365 secure scoreMicrosoft 365 Admin Role Security GuideMicrosoft 365 • microsoft 365 admin roleExchange Online Mail Flow Security GuideMicrosoft 365 • exchange online mail flowMailbox Forwarding Rule Audit GuideCompliance and Audit Readiness • mailbox forwarding rule auditShared Mailbox Security GuideIT Operations and Cybersecurity • shared mailboxDistribution Group Security GuideIT Operations and Cybersecurity • distribution groupMicrosoft 365 Retention Policy GuideMicrosoft 365 • microsoft 365 retention policyMicrosoft Defender for Endpoint Configuration GuideEndpoint Security • microsoft defender for endpointWindows Autopilot Deployment GuideMicrosoft 365 • windows autopilot deploymentWindows Update for Business GuideIT Operations and Cybersecurity • windows update for businessEndpoint Vulnerability Management GuideEndpoint Security, Vulnerability Management • endpoint vulnerability managementWindows Workstation Security ChecklistEndpoint Security • windows workstationRemote Worker Laptop Security GuideIT Operations and Cybersecurity • remote worker laptopEndpoint Monthly Maintenance ChecklistEndpoint Security • endpoint monthly maintenanceFile Server Security Hardening GuideServer Infrastructure • file server hardeningSMB File Sharing Security GuideIT Operations and Cybersecurity • smb file sharingFile Server Migration Planning GuideServer Infrastructure • file server migration planningStorage Capacity Planning GuideIT Operations and Cybersecurity • storage capacity planningStorage Snapshot Management GuideIT Operations and Cybersecurity • storage snapshot managementCloud Storage Security GuideIT Operations and Cybersecurity • cloud storageOneDrive vs File Server Planning GuideEndpoint Security, Microsoft 365, Server Infrastructure • onedrive vs file server planningSharePoint vs File Server Planning GuideMicrosoft 365, Server Infrastructure • sharepoint vs file server planningArchive Storage and Retention GuideIT Operations and Cybersecurity • archive storage and retentionSecure File Transfer Methods GuideIT Operations and Cybersecurity • secure file transfer methodsDatabase Backup and Security GuideBackup and Disaster Recovery, Server Infrastructure • database backup andDatabase Performance Monitoring GuideServer Infrastructure, Web and Application Security • database performance monitoringSQL Server Patch Management GuideServer Infrastructure • sql server patch managementSQL Server Access Control and Permissions GuideServer Infrastructure • sql server access control and permissionsSQL Server Encryption and TDE GuideServer Infrastructure • sql server encryption and tdeDatabase High Availability Planning GuideServer Infrastructure • database high availability planningApplication Server Security GuideServer Infrastructure • application serverApplication Patch Management GuideIT Operations and Cybersecurity • application patch managementApplication Access Review GuideIT Operations and Cybersecurity • application access reviewSaaS Application Security GuideIT Operations and Cybersecurity • saas applicationAPI Security for Business Applications GuideIT Operations and Cybersecurity • api for business applicationsAPI Token and Secret Management GuideIT Operations and Cybersecurity • api token and secret managementSecure Software Deployment GuideIT Operations and Cybersecurity • secure software deploymentSecure Application Decommissioning GuideIT Operations and Cybersecurity • secure application decommissioningBusiness Application Inventory GuideIT Operations and Cybersecurity • business application inventoryBusiness Application Dependency Mapping GuideIT Operations and Cybersecurity • business application dependency mappingBusiness Application Backup and Recovery GuideBackup and Disaster Recovery • business application backup and recoveryBusiness Application Monitoring GuideIT Operations and Cybersecurity • business application monitoringBusiness Application Incident Response GuideIT Operations and Cybersecurity • business application incident responseWeb Application Firewall Security GuideNetwork Infrastructure, Web and Application Security • web application firewallOWASP Top 10 for Business Websites GuideWeb and Application Security • owasp top 10 for business websitesWebsite Vulnerability Scanning GuideVulnerability Management, Web and Application Security • website vulnerability scanningWebsite Backup and Restore Testing GuideBackup and Disaster Recovery, Web and Application Security • website backup and restore testingWebsite Uptime Monitoring GuideWeb and Application Security • website uptime monitoringWebsite Performance Optimization GuideWeb and Application Security • website performance optimizationWeb Hosting Security ChecklistWeb and Application Security • web hostingApache Web Server Security GuideServer Infrastructure, Web and Application Security • apache web serverNginx Web Server Security GuideServer Infrastructure, Web and Application Security • nginx web serverSecure FTP and SFTP Security GuideIT Operations and Cybersecurity • secure ftp and sftpPublic DNS Records Security Review GuideNetwork Infrastructure • public dns records reviewDomain Registrar Security GuideIT Operations and Cybersecurity • domain registrarCloudflare DNS Security GuideNetwork Infrastructure, Web and Application Security • cloudflare dnsCloudflare Zero Trust Security GuideWeb and Application Security • cloudflare zero trustCloudflare Bot Protection GuideWeb and Application Security • cloudflare bot protectionCloudflare Rate Limiting GuideWeb and Application Security • cloudflare rate limitingWebsite Malware Response GuideWeb and Application Security • website malware responseWeb Server Log Review GuideServer Infrastructure, Web and Application Security • web server log reviewWebsite Security Header Configuration GuideWeb and Application Security • website headerWebsite Cookie Security and Privacy GuideWeb and Application Security • website cookie and privacyWebsite Admin Account Security GuideWeb and Application Security • website admin accountWordPress Plugin Security Review GuideWeb and Application Security • wordpress plugin reviewWordPress Theme Security Review GuideWeb and Application Security • wordpress theme reviewWordPress Login Protection GuideWeb and Application Security • wordpress login protectionWordPress Database Security GuideServer Infrastructure, Web and Application Security • wordpress databaseWordPress Staging and Update Testing GuideWeb and Application Security • wordpress staging and update testingWordPress Backup Retention Policy GuideBackup and Disaster Recovery, Web and Application Security • wordpress backup retention policyWordPress File Permission Security GuideWeb and Application Security • wordpress file permissionWordPress Malware Scanning GuideWeb and Application Security • wordpress malware scanningWebsite Form Security GuideWeb and Application Security • website formWebsite File Upload Security GuideWeb and Application Security • website file uploadWebsite API Endpoint Security GuideEndpoint Security, Web and Application Security • website api endpointWebsite CDN Security GuideWeb and Application Security • website cdnWebsite Origin Server Protection GuideServer Infrastructure, Web and Application Security • website origin server protectionWebsite Change Management GuideWeb and Application Security • website change managementWebsite SEO and Security Alignment GuideWeb and Application Security • website seo and alignmentBusiness Website Security Maintenance ChecklistWeb and Application Security • business website maintenanceServer Hardware Lifecycle Management GuideServer Infrastructure • server hardware lifecycle managementServer Firmware and BIOS Update Management GuideServer Infrastructure • server firmware and bios update managementHP iLO Security Configuration GuideIT Operations and Cybersecurity • hp iloDell iDRAC Security Configuration GuideIT Operations and Cybersecurity • dell idracServer Rack Cabling and Labeling Standards GuideServer Infrastructure • server rack cabling and labeling standardsUPS Battery Backup and Power Protection GuideBackup and Disaster Recovery • ups battery backup and power protectionEnvironmental Monitoring for Server Rooms GuidePhysical and IoT Security, Server Infrastructure • environmental monitoring for server roomsServer Decommissioning ChecklistServer Infrastructure • server decommissioningWorkstation Decommissioning ChecklistEndpoint Security • workstation decommissioningSecure IT Equipment Disposal GuidePhysical and IoT Security • secure it equipment disposalPrinter Data and Hard Drive Security GuidePhysical and IoT Security • printer data and hard driveSecure Document Shredding Policy GuidePhysical and IoT Security • secure document shredding policyClean Desk Policy GuidePhysical and IoT Security • clean desk policyVisitor Access Policy for IT Areas GuidePhysical and IoT Security • visitor access policy for it areasBadge and Access Control System Review GuidePhysical and IoT Security • badge and access control system reviewSecurity Camera System Review GuidePhysical and IoT Security • camera system reviewIoT Device Security GuidePhysical and IoT Security • iot deviceOT and Industrial Network Security GuideNetwork Infrastructure • ot and industrial networkBuilding Management System Security GuideIT Operations and Cybersecurity • building management systemConference Room Technology Security GuideIT Operations and Cybersecurity • conference room technologyVoIP Phone System Security GuideIT Operations and Cybersecurity • voip phone systemMicrosoft Teams Phone Security GuideMicrosoft 365 • microsoft teams phoneCloud PBX Security GuideIT Operations and Cybersecurity • cloud pbxSIP Trunk Security GuideIT Operations and Cybersecurity • sip trunkVoice VLAN Configuration GuideNetwork Infrastructure • voice vlanFax System Security and Modernization GuideIT Operations and Cybersecurity • fax system and modernizationRemote Monitoring and Management Security GuideIT Operations and Cybersecurity • remote monitoring and managementRemote Support Tool Security GuideIT Operations and Cybersecurity • remote support toolPassword Manager Deployment GuideIdentity and Access Management • password manager deploymentPassword Policy GuideIdentity and Access Management • password policyAccount Lockout Policy Best Practices GuideIT Operations and Cybersecurity • account lockout policyKerberos Authentication Security GuideIdentity and Access Management • kerberos authenticationNTLM Security and Reduction Strategy GuideIdentity and Access Management • ntlm and reduction strategyLDAP and LDAPS Security GuideIdentity and Access Management • ldap and ldapsActive Directory Replication Troubleshooting GuideBackup and Disaster Recovery, Identity and Access Management • active directory replication troubleshootingActive Directory Sites and Services Configuration GuideIdentity and Access Management • active directory sites and servicesFSMO Roles Management GuideIdentity and Access Management • fsmo roles managementActive Directory Backup and Recovery GuideBackup and Disaster Recovery, Identity and Access Management • active directory backup and recoveryActive Directory User Account Cleanup GuideIdentity and Access Management • active directory user account cleanupActive Directory Computer Account Cleanup GuideIdentity and Access Management • active directory computer account cleanupActive Directory Group Membership Review GuideIdentity and Access Management • active directory group membership reviewActive Directory Delegation of Control GuideIdentity and Access Management • active directory delegation of controlActive Directory Trusts Security GuideIdentity and Access Management • active directory trustsActive Directory Migration Planning GuideIdentity and Access Management • active directory migration planningEntra Connect Security and Sync Health GuideMicrosoft 365 • entra connect and sync healthEntra ID App Registration Security GuideMicrosoft 365 • Entra ID app registration securityEntra ID Guest User Access Review GuideMicrosoft 365 • Entra ID guest user access reviewMicrosoft 365 Break-Glass Account Security GuideMicrosoft 365 • Microsoft 365 break-glass account securityMicrosoft 365 Audit Log Review GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft 365 audit log reviewMicrosoft 365 Security Monthly Review ChecklistMicrosoft 365 • Microsoft 365 security monthly reviewHPE ProLiant Server Security and Maintenance GuideServer Infrastructure • HPE ProLiant server securityDell PowerEdge Server Security and Maintenance GuideServer Infrastructure • Dell PowerEdge server securityDell OpenManage Enterprise Configuration GuideIT Operations and Cybersecurity • Dell OpenManage Enterprise configurationHPE OneView Configuration and Security GuideIT Operations and Cybersecurity • HPE OneView configuration securityRAID Controller Monitoring and Maintenance GuideIT Operations and Cybersecurity • RAID controller monitoring maintenanceServer RAID Failure Response GuideServer Infrastructure • server RAID failure responseServer Memory and CPU Capacity Planning GuideServer Infrastructure • server memory CPU capacity planningServer Network Interface Configuration GuideNetwork Infrastructure, Server Infrastructure • server network interface configurationServer Management Network Security GuideNetwork Infrastructure, Server Infrastructure • server management network securityServer Remote Management Security GuideServer Infrastructure • server remote management securityVMware vSphere Upgrade Planning GuideVirtualization • VMware vSphere upgrade planningVMware vSphere Licensing and Support Review GuideVirtualization • VMware vSphere licensing support reviewVMware vSphere Cluster Configuration GuideVirtualization • VMware vSphere cluster configurationVMware HA Configuration GuideVirtualization • VMware HA configurationVMware DRS Configuration GuideVirtualization • VMware DRS configurationVMware vMotion Security and Configuration GuideVirtualization • VMware vMotion security configurationVMware VMFS Datastore Management GuideVirtualization • VMware VMFS datastore managementVMware NFS Datastore Security GuideVirtualization • VMware NFS datastore securityVMware Virtual Switch Security GuideNetwork Infrastructure, Virtualization • VMware virtual switch securityVMware Distributed Switch Security GuideNetwork Infrastructure, Virtualization • VMware distributed switch securityVMware VM Migration Planning GuideVirtualization • VMware VM migration planningPhysical-to-Virtual Server Migration GuidePhysical and IoT Security, Server Infrastructure • physical to virtual server migrationVirtual-to-Virtual Migration GuideIT Operations and Cybersecurity • virtual to virtual migrationHyper-V Live Migration Security GuideVirtualization • Hyper-V Live Migration securityHyper-V Failover Cluster Security GuideVirtualization • Hyper-V failover cluster securityHyper-V Replica Configuration GuideVirtualization • Hyper-V Replica configurationHyper-V Checkpoint Management GuideVirtualization • Hyper-V checkpoint managementHyper-V Virtual Switch Security GuideNetwork Infrastructure, Virtualization • Hyper-V virtual switch securityHyper-V Host Patch Management GuideVirtualization • Hyper-V host patch managementHyper-V Host Performance Monitoring GuideVirtualization, Web and Application Security • Hyper-V host performance monitoringLocal Exchange Server Security GuideServer Infrastructure • local Exchange Server securityExchange Server Hybrid Configuration Security GuideServer Infrastructure • Exchange Server hybrid configuration securityExchange Server Migration to Microsoft 365 GuideMicrosoft 365, Server Infrastructure • Exchange Server migration to Microsoft 365Exchange Server Certificate Management GuideServer Infrastructure • Exchange Server certificate managementExchange Server Backup and Recovery GuideBackup and Disaster Recovery, Server Infrastructure • Exchange Server backup recoveryExchange Server Decommissioning ChecklistServer Infrastructure • Exchange Server decommissioning checklistNessus Vulnerability Scanner Deployment GuideVulnerability Management • Nessus vulnerability scanner deploymentRapid7 InsightVM Deployment GuideVirtualization, Vulnerability Management • Rapid7 InsightVM deploymentManageEngine Vulnerability Manager Plus GuideVulnerability Management • ManageEngine Vulnerability Manager PlusSolarWinds Network Monitoring Security GuideNetwork Infrastructure • SolarWinds network monitoring securityAuvik Network Monitoring Deployment GuideNetwork Infrastructure • Auvik network monitoring deploymentPRTG Network Monitor Deployment GuideNetwork Infrastructure • PRTG Network Monitor deploymentConnectWise Automate Security GuideIT Operations and Cybersecurity • ConnectWise Automate securityKaseya VSA Security GuideIT Operations and Cybersecurity • Kaseya VSA securityNinjaOne RMM Security GuideIT Operations and Cybersecurity • NinjaOne RMM securityDatto RMM Security GuideIT Operations and Cybersecurity • Datto RMM securityDMZ Reverse Proxy Security GuideNetwork Infrastructure • DMZ reverse proxy securityDMZ Jump Server Security GuideNetwork Infrastructure, Server Infrastructure • DMZ jump server securityDMZ Public Application Publishing GuideNetwork Infrastructure • DMZ public application publishingDMZ Firewall Rule Review GuideNetwork Infrastructure • DMZ firewall rule reviewPhysical Server Inventory and Health Assessment GuidePhysical and IoT Security, Server Infrastructure • physical server inventory health assessmentRack Server Procurement and Standardization GuideServer Infrastructure • rack server procurement st ardizationBlade Server Chassis Management GuideServer Infrastructure • blade server chassis managementServer Hardware RAID Battery and Cache Protection GuideServer Infrastructure • server hardware raid battery cache protectionServer Firmware Baseline and Compliance GuideCompliance and Audit Readiness, Server Infrastructure • server firmware baseline complianceOut-of-Band Management Access Review GuideIT Operations and Cybersecurity • out of b management access reviewLenovo XClarity Administrator Security GuideCompliance and Audit Readiness • lenovo xclarity administrator securityServer BIOS and UEFI Secure Boot GuideServer Infrastructure • server bios uefi secure bootServer TPM Configuration and Key Protection GuideServer Infrastructure • server tpm configuration key protectionWindows Server Role Inventory GuideServer Infrastructure • windows server role inventoryWindows Server Baseline Configuration Review GuideServer Infrastructure • windows server baseline configuration reviewWindows Server Event Log Review GuideServer Infrastructure • windows server event log reviewWindows Server Scheduled Task Security GuideServer Infrastructure • windows server scheduled task securityLinux Server Security Baseline GuideServer Infrastructure • linux server security baselineLinux Server Patch Management GuideServer Infrastructure • linux server patch managementLinux SSH Access Security GuideServer Infrastructure • linux ssh access securityLinux Server Log Management GuideServer Infrastructure • linux server log managementVMware Lifecycle Manager Configuration GuideVirtualization • vmware lifecycle manager configurationVMware Host Profile Management GuideVirtualization • vmware host profile managementVMware Tools Lifecycle Management GuideVirtualization • vmware tools lifecycle managementVMware Virtual Hardware Compatibility GuideVirtualization • vmware virtual hardware compatibilityVirtual Machine Rightsizing GuideVirtualization • virtual machine rightsizingVirtual Machine Sprawl Management GuideVirtualization • virtual machine sprawl managementVirtual Machine Backup Verification GuideBackup and Disaster Recovery, Virtualization • virtual machine backup verificationVirtual Machine Guest OS Upgrade Planning GuideVirtualization • virtual machine guest os upgrade planningVirtual Machine Template Security GuideVirtualization • virtual machine template securityVirtual Machine Clone and Template Management GuideVirtualization • virtual machine clone template managementVM Migration Tool Selection GuideVirtualization • vm migration tool selectionCluster Quorum and Witness Configuration GuideIT Operations and Cybersecurity • cluster quorum witness configurationWindows Failover Cluster Validation GuideIT Operations and Cybersecurity • windows failover cluster validationActive Directory OU Design GuideIdentity and Access Management • active directory ou designGroup Policy Change Management GuideIdentity and Access Management • group policy change managementGroup Policy Security Filtering GuideIdentity and Access Management • group policy security filteringGroup Policy Backup and Restore GuideBackup and Disaster Recovery, Identity and Access Management • group policy backup restoreService Account Password Rotation GuideIdentity and Access Management • service account password rotationPrivileged Access Workstation Planning GuideEndpoint Security, Identity and Access Management • privileged access workstation planningAdministrative Tiering Model for Active Directory GuideCompliance and Audit Readiness, Identity and Access Management • administrative tiering model for active directoryMicrosoft Entra Conditional Access Policy Review GuideMicrosoft 365 • microsoft entra conditional access policy reviewMicrosoft Entra Identity Protection Review GuideMicrosoft 365 • microsoft entra identity protection reviewMicrosoft Entra Privileged Identity Management Operations GuideIdentity and Access Management, Microsoft 365 • microsoft entra privileged identity management operationsIPAM Deployment and Operations GuideIT Operations and Cybersecurity • ipam deployment operationsSubnet Design and IP Address Planning GuideNetwork Infrastructure • subnet design ip address planningRouting Table Review and Documentation GuideIT Operations Management, Network Infrastructure • routing table review documentationStatic Route Management GuideIT Operations and Cybersecurity • static route managementDynamic Routing Protocol Security GuideNetwork Infrastructure • dynamic routing protocol securityNAT Policy Review GuideNetwork Infrastructure • nat policy reviewNTP Server Security and Time Synchronization GuideNetwork Infrastructure, Server Infrastructure • ntp server security time synchronizationCore Switch High Availability GuideNetwork Infrastructure • core switch high availabilityAccess Switch Port Security GuideNetwork Infrastructure • access switch port securityLayer 3 Switch Routing Security GuideNetwork Infrastructure • layer 3 switch routing securitySwitch Stack Upgrade Planning GuideNetwork Infrastructure • switch stack upgrade planningPoE Switch Capacity Planning GuideNetwork Infrastructure • poe switch capacity planningWireless Access Point Lifecycle Management GuideNetwork Infrastructure • wireless access point lifecycle managementWireless LAN Controller Security GuideNetwork Infrastructure • wireless lan controller securityGuest Wi-Fi Captive Portal Security GuideNetwork Infrastructure • guest wi fi captive portal securityWireless Site Survey Deliverables GuideNetwork Infrastructure • wireless site survey deliverablesNext-Generation Firewall Feature Comparison GuideNetwork Infrastructure • next generation firewall feature comparisonFirewall Subscription and License Review GuideIT Operations Management, Network Infrastructure • firewall subscription license reviewVPN Concentrator Capacity Planning GuideMicrosoft 365, Network Infrastructure • vpn concentrator capacity planningSD-WAN Appliance Selection GuideNetwork Infrastructure • sd wan appliance selectionInternet Circuit Redundancy Design GuideIT Operations and Cybersecurity • internet circuit redundancy designDMZ Server Patch and Exposure Review GuideNetwork Infrastructure, Server Infrastructure • dmz server patch exposure reviewDFS Namespace Design and Security GuideIT Operations and Cybersecurity • dfs namespace design securityDFS Replication Monitoring GuideBackup and Disaster Recovery • dfs replication monitoringPrint Server Migration GuideServer Infrastructure • print server migrationPrint Driver Security and Management GuideIT Operations and Cybersecurity • print driver security managementNAS Backup Target Security GuideBackup and Disaster Recovery • nas backup target securityiSCSI Network Design and Security GuideNetwork Infrastructure • iscsi network design securityBackup Appliance Hardening GuideBackup and Disaster Recovery • backup appliance hardeningCloud Backup Vendor Selection GuideBackup and Disaster Recovery, IT Operations Management • cloud backup vendor selectionBackup Encryption Key Management GuideBackup and Disaster Recovery • backup encryption key managementReplication Tool Selection and Security GuideBackup and Disaster Recovery • replication tool selection securityRecovery Documentation Template GuideBackup and Disaster Recovery, IT Operations Management • recovery documentation templateEDR Tool Selection GuideEndpoint Security • edr tool selectionMDR Service Evaluation GuideEndpoint Security • mdr service evaluationAntivirus Policy Management GuideEndpoint Security • antivirus policy managementBitLocker Recovery Key Management GuideBackup and Disaster Recovery, Endpoint Security • bitlocker recovery key managementWSUS Server Cleanup and Maintenance GuideServer Infrastructure • wsus server cleanup maintenanceMicrosoft Intune Compliance Policy Review GuideCompliance and Audit Readiness, Microsoft 365 • microsoft intune compliance policy reviewMDM Enrollment and Device Ownership GuideIT Operations and Cybersecurity • mdm enrollment device ownershipRMM Script Governance GuideIT Operations and Cybersecurity • rmm script governanceQualys Vulnerability Management Deployment GuideVulnerability Management • qualys vulnerability management deploymentCredentialed Vulnerability Scanning GuideVulnerability Management • credentialed vulnerability scanningExternal Vulnerability Scanner Placement GuideVulnerability Management • external vulnerability scanner placementSIEM Use Case Development GuideIT Operations and Cybersecurity • siem use case developmentSIEM Log Source Onboarding GuideIT Operations and Cybersecurity • siem log source onboardingLog Retention Policy GuideIT Operations and Cybersecurity • log retention policyNetFlow Traffic Analysis Deployment GuideNetwork Infrastructure • netflow traffic analysis deploymentSNMPv3 Migration GuideNetwork Infrastructure • snmpv3 migrationSyslog Source Configuration GuideNetwork Infrastructure • syslog source configurationAlert Tuning and Noise Reduction GuideIT Operations and Cybersecurity • alert tuning noise reductionTicketing System Workflow Design GuideIT Operations Management • ticketing system workflow designMonitoring-to-Ticketing Integration GuideIT Operations Management • monitoring to ticketing integrationIT Infrastructure Dashboard Design GuideIT Operations and Cybersecurity • it infrastructure dashboard designMonthly Infrastructure Health Report GuideIT Operations and Cybersecurity • monthly infrastructure health reportServer Management SOP Library GuideServer Infrastructure • server management sop libraryNetwork Device Backup Verification GuideBackup and Disaster Recovery, Network Infrastructure • network device backup verificationFirewall Configuration Backup and Restore GuideBackup and Disaster Recovery, Network Infrastructure • firewall configuration backup restoreInfrastructure Vulnerability Remediation Roadmap GuideVulnerability Management • infrastructure vulnerability remediation roadmapIT Operations Tool Stack Assessment GuideIT Operations and Cybersecurity • it operations tool stack assessmentZabbix Network Monitoring Deployment and Reporting GuideNetwork Infrastructure • zabbix network monitoring deployment reportingNagios XI Infrastructure Monitoring GuideIT Operations and Cybersecurity • nagios xi infrastructure monitoringPRTG Network Monitor Evaluation and Deployment GuideNetwork Infrastructure • prtg network monitor evaluation deploymentSolarWinds Network Performance Monitor GuideNetwork Infrastructure, Web and Application Security • solarwinds network performance monitorAuvik Network Management Platform GuideNetwork Infrastructure, Web and Application Security • auvik network management platformLogicMonitor Hybrid Infrastructure Monitoring GuideIT Operations and Cybersecurity • logicmonitor hybrid infrastructure monitoringDatadog Infrastructure Monitoring GuideIT Operations and Cybersecurity • datadog infrastructure monitoringNew Relic Observability Platform GuideWeb and Application Security • new relic observability platformDynatrace Infrastructure and Application Observability GuideNetwork Infrastructure • dynatrace infrastructure application observabilityManageEngine OpManager Network Monitoring GuideNetwork Infrastructure • manageengine opmanager network monitoringLibreNMS Open Source Network Monitoring GuideNetwork Infrastructure • librenms open source network monitoringOpenNMS Network Monitoring Platform GuideNetwork Infrastructure, Web and Application Security • opennms network monitoring platformPrometheus Monitoring and Alerting GuideIT Operations and Cybersecurity • prometheus monitoring alertingGrafana Dashboard and Visualization GuideIT Operations and Cybersecurity • grafana dashboard visualizationElastic Observability GuideIT Operations and Cybersecurity • elastic observabilitySplunk IT Service Intelligence GuideIT Operations and Cybersecurity • splunk it service intelligenceCisco ThousandEyes Network Experience Monitoring GuideNetwork Infrastructure • cisco thousandeyes network experience monitoringKentik Network Observability GuideNetwork Infrastructure • kentik network observabilityDomotz Network Monitoring GuideNetwork Infrastructure • domotz network monitoringNetFlow Analyzer Traffic Visibility GuideNetwork Infrastructure • netflow analyzer traffic visibilityNessus Professional Vulnerability Scanner GuideVulnerability Management • nessus professional vulnerability scannerTenable Vulnerability Management Platform GuideVulnerability Management, Web and Application Security • tenable vulnerability management platformTenable One Exposure Management GuideIT Operations and Cybersecurity • tenable one exposure managementRapid7 InsightVM Vulnerability Management GuideVirtualization, Vulnerability Management • rapid7 insightvm vulnerability managementQualys VMDR Vulnerability Management GuideEndpoint Security, Vulnerability Management • qualys vmdr vulnerability managementGreenbone OpenVAS Vulnerability Scanning GuideVulnerability Management • greenbone openvas vulnerability scanningNuclei Template-Based Vulnerability Scanning GuideVulnerability Management • nuclei template-based vulnerability scanningBurp Suite Web Application Security Testing GuideWeb and Application Security • burp suite web application security testingOWASP ZAP Web Security Testing GuideWeb and Application Security • owasp zap web security testingAcunetix Web Vulnerability Scanner GuideVulnerability Management, Web and Application Security • acunetix web vulnerability scannerInvicti Web Application Security Scanner GuideVulnerability Management, Web and Application Security • invicti web application security scannerWiz Cloud Security Platform GuideWeb and Application Security • wiz cloud security platformOrca Security Cloud Risk Platform GuideWeb and Application Security • orca security cloud risk platformMicrosoft Defender Vulnerability Management GuideVulnerability Management • microsoft defender vulnerability managementManageEngine Vulnerability Manager Plus Evaluation GuideVulnerability Management • manageengine vulnerability manager plus evaluationMicrosoft Intune Endpoint Management GuideEndpoint Security, Microsoft 365 • microsoft intune endpoint managementManageEngine Endpoint Central GuideEndpoint Security, Microsoft 365 • manageengine endpoint centralPDQ Deploy and Inventory GuideIT Operations and Cybersecurity • pdq deploy inventoryAction1 Patch Management GuideIT Operations and Cybersecurity • action1 patch managementNinjaOne Endpoint Management GuideEndpoint Security • ninjaone endpoint managementAtera RMM Platform GuideWeb and Application Security • atera rmm platformN-able N-central RMM GuideMicrosoft 365 • n-able n-central rmmN-able N-sight RMM GuideIT Operations and Cybersecurity • n-able n-sight rmmConnectWise RMM GuideIT Operations and Cybersecurity • connectwise rmmKaseya VSA Remote IT Management GuideIT Operations and Cybersecurity • kaseya vsa remote it managementDatto RMM Operations GuideIT Operations and Cybersecurity • datto rmm operationsJamf Pro Apple Device Management GuideIT Operations and Cybersecurity • jamf pro apple device managementKandji Apple Device Management GuideIT Operations and Cybersecurity • kandji apple device managementMosyle Apple Device Management GuideIT Operations and Cybersecurity • mosyle apple device managementOkta Workforce Identity GuideIT Operations and Cybersecurity • okta workforce identityCisco Duo MFA Deployment GuideIdentity and Access Management • cisco duo mfa deploymentPing Identity Workforce IAM GuideIT Operations and Cybersecurity • ping identity workforce iamYubico YubiKey Phishing-Resistant MFA GuideIdentity and Access Management • yubico yubikey phishing-resistant mfa1Password Business Password Manager GuideIdentity and Access Management • 1password business password managerKeeper Business Password Manager GuideIdentity and Access Management • keeper business password managerBitwarden Enterprise Password Manager GuideIdentity and Access Management • bitwarden enterprise password managerCyberArk Privileged Access Management GuideIdentity and Access Management • cyberark privileged access managementBeyondTrust Privileged Remote Access GuideIdentity and Access Management • beyondtrust privileged remote accessDelinea Secret Server PAM GuideServer Infrastructure • delinea secret server pamMicrosoft Entra Private Access and Internet Access GuideMicrosoft 365 • microsoft entra private access internet accessCrowdStrike Falcon EDR GuideEndpoint Security • crowdstrike falcon edrSentinelOne Singularity Endpoint GuideEndpoint Security • sentinelone singularity endpointSophos Intercept X Endpoint GuideEndpoint Security • sophos intercept x endpointBitdefender GravityZone Endpoint Security GuideEndpoint Security • bitdefender gravityzone endpoint securityTrend Vision One Endpoint Security GuideEndpoint Security • trend vision one endpoint securityCisco Secure Endpoint GuideEndpoint Security • cisco secure endpointHuntress Managed EDR GuideEndpoint Security • huntress managed edrArctic Wolf MDR GuideEndpoint Security • arctic wolf mdrRed Canary MDR GuideEndpoint Security • red canary mdrPalo Alto Cortex XDR GuideIT Operations and Cybersecurity • palo alto cortex xdrMicrosoft Sentinel SIEM GuideIT Operations and Cybersecurity • microsoft sentinel siemSplunk Enterprise Security GuideIT Operations and Cybersecurity • splunk enterprise securityIBM QRadar SIEM GuideIT Operations and Cybersecurity • ibm qradar siemGoogle Security Operations Chronicle GuideIT Operations and Cybersecurity • google security operations chronicleElastic Security SIEM GuideIT Operations and Cybersecurity • elastic security siemWazuh Open Source Security Monitoring GuideIT Operations and Cybersecurity • wazuh open source security monitoringGraylog Log Management GuideIT Operations and Cybersecurity • graylog log managementLogRhythm SIEM GuideIT Operations and Cybersecurity • logrhythm siemSumo Logic Cloud SIEM GuideIT Operations and Cybersecurity • sumo logic cloud siemSecurity Onion Network Security Monitoring GuideNetwork Infrastructure • security onion network security monitoringMicrosoft Defender for Office 365 GuideMicrosoft 365 • microsoft defender office 365Proofpoint Email Security GuideIT Operations and Cybersecurity • proofpoint email securityMimecast Email Security GuideIT Operations and Cybersecurity • mimecast email securityBarracuda Email Protection GuideIT Operations and Cybersecurity • barracuda email protectionAbnormal Security Email Protection GuideIT Operations and Cybersecurity • abnormal security email protectionCheck Point Harmony Email and Collaboration GuideIT Operations and Cybersecurity • check point harmony email collaborationCisco Secure Email Threat Defense GuideIT Operations and Cybersecurity • cisco secure email threat defenseCloudflare Area 1 Email Security GuideWeb and Application Security • cloudflare area 1 email securityVeeam Backup and Replication GuideBackup and Disaster Recovery • veeam backup replicationAcronis Cyber Protect Backup GuideBackup and Disaster Recovery • acronis cyber protect backupDatto BCDR Backup Appliance GuideBackup and Disaster Recovery • datto bcdr backup applianceRubrik Data Security Platform GuideWeb and Application Security • rubrik data security platformCohesity DataProtect GuideIT Operations and Cybersecurity • cohesity dataprotectCommvault Backup and Recovery GuideBackup and Disaster Recovery • commvault backup recoveryDruva Cloud Data Protection GuideIT Operations and Cybersecurity • druva cloud data protectionAvePoint Microsoft 365 Backup GuideBackup and Disaster Recovery, Microsoft 365 • avepoint microsoft 365 backupSynology Active Backup for Business GuideBackup and Disaster Recovery • synology active backup businessAzure Backup and Recovery Services Vault GuideBackup and Disaster Recovery, Microsoft Azure • azure backup recovery services vaultFortinet FortiManager and FortiAnalyzer GuideIT Operations and Cybersecurity • fortinet fortimanager fortianalyzerPalo Alto Panorama Firewall Management GuideNetwork Infrastructure • palo alto panorama firewall managementCybersecurity Basics for Small Business NetworksNetwork Infrastructure • cybersecurity basics small business networksCybersecurity Risk Assessment Process GuideIT Operations and Cybersecurity • cybersecurity risk assessment processCybersecurity Control Categories GuideIT Operations and Cybersecurity • cybersecurity control categoriesCybersecurity Policy Starter Set GuideIT Operations and Cybersecurity • cybersecurity policy starter setMonthly Cyber Hygiene Checklist GuideIT Operations and Cybersecurity • monthly cyber hygiene checklistSecurity Architecture Review GuideIT Operations and Cybersecurity • security architecture reviewDefense-in-Depth Network Design GuideNetwork Infrastructure • defense in depth network designZero Trust Implementation Roadmap GuideIT Operations and Cybersecurity • zero trust implementation roadmapCybersecurity Asset Inventory GuideIT Operations Management • cybersecurity asset inventoryAttack Surface Management GuideIT Operations and Cybersecurity • attack surface managementFirewall Policy Governance GuideNetwork Infrastructure • firewall policy governanceTop Next-Generation Firewall Vendors Comparison GuideIT Operations Management, Network Infrastructure • top next generation firewall vendors comparisonFortinet FortiGate Security Operations GuideIT Operations and Cybersecurity • Fortinet FortiGate security operationsPalo Alto Networks NGFW Security Operations GuideNetwork Infrastructure • Palo Alto Networks NGFW security operationsCisco Secure Firewall Operations GuideNetwork Infrastructure • Cisco Secure Firewall operationsSonicWall Firewall Security Operations GuideNetwork Infrastructure • SonicWall firewall security operationsSophos Firewall Security Operations GuideNetwork Infrastructure • Sophos Firewall security operationsCloudflare Network Security Services GuideNetwork Infrastructure, Web and Application Security • Cloudflare network security servicesNetwork Access Control Tools Comparison GuideNetwork Infrastructure • network access control tools comparisonCisco ISE Network Access Control GuideNetwork Infrastructure • Cisco ISE network access controlAruba ClearPass Network Access Control GuideNetwork Infrastructure • Aruba ClearPass network access controlFortiNAC Network Access Control GuideNetwork Infrastructure • FortiNAC network access controlMFA Tool Selection and Deployment GuideIdentity and Access Management • MFA tool selection deploymentMicrosoft Entra MFA Deployment GuideIdentity and Access Management, Microsoft 365 • Microsoft Entra MFA deploymentCisco Duo MFA Deployment GuideIdentity and Access Management • Cisco Duo MFA deploymentOkta Adaptive MFA Deployment GuideIdentity and Access Management • Okta Adaptive MFA deploymentYubiKey and FIDO2 Hardware Key Security GuideIT Operations and Cybersecurity • YubiKey FIDO2 hardware key securityPrivileged Access Management Tools Comparison GuideIdentity and Access Management • privileged access management tools comparisonCyberArk Privileged Access Manager GuideIdentity and Access Management • CyberArk Privileged Access ManagerBeyondTrust Privileged Access Management GuideIdentity and Access Management • BeyondTrust privileged access managementDelinea Secret Server PAM GuideServer Infrastructure • Delinea Secret Server PAMMicrosoft Defender XDR Operations GuideIT Operations and Cybersecurity • Microsoft Defender XDR operationsCrowdStrike Falcon EDR Operations GuideEndpoint Security • CrowdStrike Falcon EDR operationsSentinelOne Singularity EDR Operations GuideEndpoint Security • SentinelOne Singularity EDR operationsSophos Intercept X Endpoint Security GuideEndpoint Security • Sophos Intercept X endpoint securityHuntress MDR Security Operations GuideEndpoint Security • Huntress MDR security operationsArctic Wolf MDR Evaluation GuideEndpoint Security • Arctic Wolf MDR evaluationSophos MDR Evaluation GuideEndpoint Security • Sophos MDR evaluationEndpoint Hardening Baseline GuideEndpoint Security • endpoint hardening baselineApplication Control and Allowlisting Tools GuideIT Operations and Cybersecurity • application control allowlisting toolsVulnerability Scanner Tools Comparison GuideVulnerability Management • vulnerability scanner tools comparisonNessus Reporting and Remediation Workflow GuideVulnerability Management • Nessus reporting remediation workflowTenable Vulnerability Management GuideVulnerability Management • Tenable Vulnerability ManagementRapid7 InsightVM Remediation Projects GuideVirtualization, Vulnerability Management • Rapid7 InsightVM remediation projectsQualys VMDR Dashboard and Remediation GuideEndpoint Security, Vulnerability Management • Qualys VMDR dashboard remediationGreenbone OpenVAS Vulnerability Scanning GuideVulnerability Management • Greenbone OpenVAS vulnerability scanningNuclei Vulnerability Scanner GuideVulnerability Management • Nuclei vulnerability scanner guideCISA KEV-Based Remediation GuideIT Operations and Cybersecurity • CISA KEV based remediationVulnerability Prioritization and CVSS GuideVulnerability Management • vulnerability prioritization CVSS guidePatch and Vulnerability Correlation GuideVulnerability Management • patch vulnerability correlationAuthorized Penetration Testing Tool Selection GuideIT Operations and Cybersecurity • authorized penetration testing tool selectionKali Linux Security Testing Platform GuideServer Infrastructure, Web and Application Security • Kali Linux security testing platformMetasploit Framework Validation GuideIT Operations and Cybersecurity • Metasploit Framework validation guideBurp Suite Web Application Testing GuideWeb and Application Security • Burp Suite web application testingOWASP ZAP Web Security Testing GuideWeb and Application Security • OWASP ZAP web security testingNmap Authorized Network Discovery GuideNetwork Infrastructure • Nmap authorized network discoveryWireshark Packet Analysis GuideIT Operations and Cybersecurity • Wireshark packet analysisShodan External Exposure Review GuideIT Operations and Cybersecurity • Shodan external exposure reviewCensys Attack Surface Discovery GuideIT Operations and Cybersecurity • Censys attack surface discoveryMXToolbox Email and DNS Security Checks GuideNetwork Infrastructure • MXToolbox email DNS security checksEmail Security Stack Evaluation GuideIT Operations and Cybersecurity • email security stack evaluationMicrosoft Defender for Office 365 Security GuideMicrosoft 365 • Microsoft Defender for Office 365 security guideProofpoint Email Security GuideIT Operations and Cybersecurity • Proofpoint email security guideMimecast Email Security GuideIT Operations and Cybersecurity • Mimecast email security guideBarracuda Email Protection GuideIT Operations and Cybersecurity • Barracuda email protection guideAbnormal Security Email Protection GuideIT Operations and Cybersecurity • Abnormal Security email protectionDMARC Monitoring Tools Comparison GuideIT Operations and Cybersecurity • DMARC monitoring tools comparisonValimail DMARC Management GuideIT Operations and Cybersecurity • Valimail DMARC managementCloudflare Email Security GuideWeb and Application Security • Cloudflare email security guideSecure Email Gateway vs API Email Security GuideIT Operations and Cybersecurity • secure email gateway vs API email securityCloud Security Posture Management Tools GuideIT Operations and Cybersecurity • cloud security posture management toolsMicrosoft Defender for Cloud Security GuideIT Operations and Cybersecurity • Microsoft Defender for Cloud security guideWiz Cloud Security Platform GuideWeb and Application Security • Wiz cloud security platform guidePrisma Cloud Security Platform GuideWeb and Application Security • Prisma Cloud security platform guideOrca Security Cloud Security Platform GuideWeb and Application Security • Orca Security cloud security platform guideAWS Security Hub Operations GuideIT Operations and Cybersecurity • AWS Security Hub operationsGoogle Security Command Center GuideIT Operations and Cybersecurity • Google Security Command Center guideAzure Security Baseline and Benchmark GuideMicrosoft Azure • Azure security baseline benchmarkSASE Vendor Selection GuideIT Operations Management • SASE vendor selection guideDLP Tool Selection GuideIT Operations and Cybersecurity • DLP tool selection guideMicrosoft Purview Information Protection GuideMicrosoft 365, Web and Application Security • Microsoft Purview information protection guideForcepoint DLP GuideIT Operations and Cybersecurity • Forcepoint DLP guideSymantec Broadcom DLP GuideIT Operations and Cybersecurity • Symantec Broadcom DLP guideVaronis Data Security Platform GuideWeb and Application Security • Varonis data security platform guideNetwrix Auditor Security Monitoring GuideCompliance and Audit Readiness • Netwrix Auditor security monitoringSIEM Tool Selection GuideIT Operations and Cybersecurity • SIEM tool selection guideMicrosoft Sentinel Use Case Operations GuideIT Operations and Cybersecurity • Microsoft Sentinel use case operationsSplunk Enterprise Security GuideIT Operations and Cybersecurity • Splunk Enterprise Security guideIBM QRadar SIEM GuideIT Operations and Cybersecurity • IBM QRadar SIEM guideElastic Security GuideIT Operations and Cybersecurity • Elastic Security guideGraylog Security Log Management GuideIT Operations and Cybersecurity • Graylog security log managementIncident Response Tool Stack GuideIT Operations and Cybersecurity • incident response tool stackSOAR Tool Selection GuideIT Operations and Cybersecurity • SOAR tool selection guideMicrosoft Defender XDR Incident Queue GuideIT Operations and Cybersecurity • Microsoft Defender XDR incident queueTheHive and Cortex Incident Response GuideIT Operations and Cybersecurity • TheHive Cortex incident responsePhishing Simulation Tools Comparison GuideIT Operations and Cybersecurity • phishing simulation tools comparisonCIS Controls Implementation GuideIT Operations and Cybersecurity • CIS Controls implementation guideNIST Cybersecurity Framework 2.0 Program GuideCompliance and Audit Readiness • NIST Cybersecurity Framework 2.0 programCyber Insurance Security Control Checklist GuideCompliance and Audit Readiness • cyber insurance security control checklistCybersecurity Executive Dashboard and Board Reporting GuideIT Operations and Cybersecurity • cybersecurity executive dashboard board reportingManaged IT Onboarding Discovery GuideIT Operations and Cybersecurity • managed IT onboarding discoveryManaged IT Client Environment Documentation GuideIT Operations Management • managed IT client environment documentationCo-Managed IT Operating Model GuideIT Operations and Cybersecurity • co-managed IT operating modelIT Support Escalation Matrix GuideIT Operations and Cybersecurity • IT support escalation matrixHelp Desk Knowledge Base Design GuideIT Operations Management • help desk knowledge base designManaged IT Asset Lifecycle Governance GuideIT Operations and Cybersecurity • managed IT asset lifecycle governanceBusiness IT Hardware Procurement Standards GuideIT Operations and Cybersecurity • business IT hardware procurement standardsStandard Workstation Build and Deployment GuideEndpoint Security • standard workstation build deploymentServer and Network Maintenance Calendar GuideNetwork Infrastructure, Server Infrastructure • server network maintenance calendarIT Change Advisory Workflow GuideIT Operations and Cybersecurity • IT change advisory workflowIT Project Intake and Prioritization GuideIT Operations and Cybersecurity • IT project intake prioritizationQuarterly Business Review for Managed IT GuideIT Operations and Cybersecurity • managed IT quarterly business reviewIT Vendor Renewal Calendar GuideIT Operations Management • IT vendor renewal calendarTelecom and ISP Provider Management GuideIT Operations and Cybersecurity • telecom ISP provider managementInternet Circuit Inventory and Ownership GuideIT Operations and Cybersecurity • internet circuit inventory ownershipBranch Office Network Design GuideNetwork Infrastructure • branch office network designSmall Business Network Architecture GuideNetwork Infrastructure • small business network architectureMulti-Site Network Standardization GuideNetwork Infrastructure • multi-site network standardizationNetwork Closet Remediation GuideNetwork Infrastructure • network closet remediationStructured Cabling Assessment GuideIT Operations and Cybersecurity • structured cabling assessmentPatch Panel Documentation and Port Mapping GuideIT Operations Management • patch panel documentation port mappingCore Distribution Access Network Design GuideNetwork Infrastructure • core distribution access network designNetwork High Availability Architecture Review GuideNetwork Infrastructure • network high availability architecture reviewInternet Failover Testing and Validation GuideIT Operations and Cybersecurity • internet failover testing validationRouter Replacement Planning GuideNetwork Infrastructure • router replacement planningSwitch Refresh and Standardization GuideNetwork Infrastructure • switch refresh standardizationBusiness Wi-Fi Refresh Planning GuideNetwork Infrastructure • business Wi-Fi refresh planningGuest Network Design for Business Offices GuideNetwork Infrastructure • guest network design business officesWireless Roaming Optimization GuideNetwork Infrastructure • wireless roaming optimizationOffice Wi-Fi Capacity Planning GuideNetwork Infrastructure • office Wi-Fi capacity planningFirewall Replacement Planning GuideNetwork Infrastructure • firewall replacement planningFirewall Policy Lifecycle Management GuideNetwork Infrastructure • firewall policy lifecycle managementSmall Business Firewall Vendor Selection GuideIT Operations Management, Network Infrastructure • small business firewall vendor selectionCisco Meraki Network Operations GuideNetwork Infrastructure • Cisco Meraki network operationsCisco Catalyst Center Network Automation GuideNetwork Infrastructure • Cisco Catalyst Center network automationAruba Central Network Management GuideMicrosoft 365, Network Infrastructure • Aruba Central network managementUbiquiti UniFi Network Management GuideNetwork Infrastructure • Ubiquiti UniFi network managementFortinet FortiGate Operations GuideIT Operations and Cybersecurity • Fortinet FortiGate operationsPalo Alto Networks Firewall Operations GuideNetwork Infrastructure • Palo Alto Networks firewall operationsSonicWall Firewall Operations GuideNetwork Infrastructure • SonicWall firewall operationsJuniper Mist Network Operations GuideNetwork Infrastructure • Juniper Mist network operationsNetwork Configuration Management Tool Selection GuideNetwork Infrastructure • network configuration management tool selectionNetwork Performance Baseline GuideNetwork Infrastructure, Web and Application Security • network performance baselineBandwidth Capacity Planning GuideIT Operations and Cybersecurity • bandwidth capacity planningApplication Traffic Path Documentation GuideIT Operations Management • application traffic path documentationNetwork Troubleshooting Runbook GuideNetwork Infrastructure • network troubleshooting runbookNOC Monitoring Operating Model GuideIT Operations and Cybersecurity • NOC monitoring operating modelManaged IT SLA Reporting GuideIT Operations Management • managed IT SLA reportingBackup and DR Managed Service Reporting GuideBackup and Disaster Recovery • backup DR managed service reportingCloud Operations SOP Library GuideIT Operations and Cybersecurity • cloud operations SOP libraryAzure Subscription Governance GuideMicrosoft Azure • Azure subscription governanceAzure Resource Group Standardization GuideMicrosoft Azure • Azure resource group standardizationAzure Naming and Tagging Standards GuideMicrosoft Azure • Azure naming tagging standardsAzure Cost Management Operations GuideMicrosoft Azure • Azure cost management operationsAzure RBAC Review and Role Assignment GuideMicrosoft Azure • Azure RBAC review role assignmentAzure Network Architecture Review GuideMicrosoft Azure, Network Infrastructure • Azure network architecture reviewAzure Hub-and-Spoke Network Design GuideMicrosoft Azure, Network Infrastructure • Azure hub-and-spoke network designAzure VPN Gateway Operations GuideMicrosoft Azure, Network Infrastructure • Azure VPN Gateway operationsAzure ExpressRoute Readiness GuideMicrosoft Azure • Azure ExpressRoute readinessAzure Private Endpoint Operations GuideEndpoint Security, Microsoft Azure • Azure Private Endpoint operationsAzure Private DNS Zone Management GuideMicrosoft Azure, Network Infrastructure • Azure Private DNS Zone managementAzure Update Manager Operations GuideMicrosoft Azure • Azure Update Manager operationsAzure Arc Server Management GuideMicrosoft Azure, Server Infrastructure • Azure Arc server managementAzure Backup Operations Reporting GuideBackup and Disaster Recovery, Microsoft Azure • Azure Backup operations reportingAzure Monitor Alert Design GuideMicrosoft Azure • Azure Monitor alert designAzure Log Analytics Workspace Governance GuideMicrosoft Azure • Azure Log Analytics workspace governanceMicrosoft 365 Tenant Governance GuideMicrosoft 365 • Microsoft 365 tenant governanceMicrosoft 365 License Optimization GuideIT Operations Management, Microsoft 365 • Microsoft 365 license optimizationMicrosoft 365 Admin Center Operations GuideMicrosoft 365 • Microsoft 365 Admin Center operationsEntra ID User Lifecycle Operations GuideMicrosoft 365 • Entra ID user lifecycle operationsEntra Device Join Strategy GuideMicrosoft 365 • Entra device join strategySharePoint Site Governance GuideMicrosoft 365 • SharePoint site governanceMicrosoft Teams Governance GuideMicrosoft 365 • Microsoft Teams governanceExchange Online Mailbox Lifecycle Operations GuideMicrosoft 365 • Exchange Online mailbox lifecycle operationsOneDrive Known Folder Move Deployment GuideEndpoint Security, Microsoft 365 • OneDrive Known Folder Move deploymentMicrosoft 365 Service Health Monitoring GuideMicrosoft 365 • Microsoft 365 service health monitoringGoogle Workspace Admin Operations GuideIT Operations and Cybersecurity • Google Workspace admin operationsAWS Account Governance GuideIT Operations and Cybersecurity • AWS account governanceAWS VPC Architecture Review GuideIT Operations and Cybersecurity • AWS VPC architecture reviewAWS IAM Access Review GuideIT Operations and Cybersecurity • AWS IAM access reviewAWS Backup and Recovery Readiness GuideBackup and Disaster Recovery • AWS backup recovery readinessGoogle Cloud IAM Governance GuideIT Operations and Cybersecurity • Google Cloud IAM governanceCloudflare Business DNS and CDN Operations GuideNetwork Infrastructure, Web and Application Security • Cloudflare business DNS CDN operationsHybrid Cloud Connectivity Planning GuideIT Operations and Cybersecurity • hybrid cloud connectivity planningCloud Migration Readiness Assessment GuideIT Operations and Cybersecurity • cloud migration readiness assessmentServer Migration to Azure Planning GuideMicrosoft Azure, Server Infrastructure • server migration to Azure planningRemote Access Modernization GuideIT Operations and Cybersecurity • remote access modernizationHybrid Identity Operations GuideIT Operations and Cybersecurity • hybrid identity operationsCloud File Collaboration Modernization GuideIT Operations and Cybersecurity • cloud file collaboration modernizationManaged IT Security Handoff to OC Security Audit GuideCompliance and Audit Readiness • managed IT security handoff to OC Security AuditInfrastructure Monitoring Tool Requirements GuideIT Operations and Cybersecurity • infrastructure monitoring tool requirementsManaged IT Patch Governance GuideIT Operations and Cybersecurity • managed IT patch governanceManaged IT Backup Governance GuideBackup and Disaster Recovery • managed IT backup governanceManaged IT Documentation Quality Review GuideIT Operations Management • managed IT documentation quality reviewManaged IT Endpoint Operations GuideEndpoint Security • managed IT endpoint operationsManaged IT Server Operations GuideServer Infrastructure • managed IT server operationsManaged IT Network Operations GuideNetwork Infrastructure • managed IT network operationsCloud Operations Review for IT Managers GuideIT Operations and Cybersecurity • cloud operations review for IT managersExecutive Technology Roadmap for Managed IT GuideIT Operations and Cybersecurity • executive technology roadmap managed ITManaged IT and Cloud Improvement Roadmap GuideIT Operations and Cybersecurity • managed IT cloud improvement roadmapMicrosoft 365 Tenant Documentation and Architecture GuideIT Operations Management, Microsoft 365 • microsoft 365 tenant documentationMicrosoft 365 Admin Center Operations RunbookMicrosoft 365 • Microsoft 365 admin center operationsMicrosoft 365 Service Health and Message Center Review GuideMicrosoft 365 • Microsoft 365 service health reviewMicrosoft 365 License Assignment Governance GuideIT Operations Management, Microsoft 365 • Microsoft 365 license assignment governanceMicrosoft 365 Group-Based Licensing Design GuideMicrosoft 365 • Microsoft 365 group-based licensingMicrosoft 365 Domain Lifecycle and DNS Ownership Review GuideMicrosoft 365, Network Infrastructure • Microsoft 365 domain lifecycle DNS reviewMicrosoft 365 Tenant Branding and Company Profile Governance GuideMicrosoft 365 • Microsoft 365 tenant branding governanceMicrosoft 365 Support Access and Admin Consent Governance GuideMicrosoft 365 • Microsoft 365 support access governanceMicrosoft 365 Billing Administrator and Subscription Ownership Review GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft 365 billing administrator reviewMicrosoft 365 Apps Update Channel Management GuideMicrosoft 365 • Microsoft 365 Apps update channel managementMicrosoft 365 Apps Admin Center Policy Management GuideMicrosoft 365 • Microsoft 365 Apps admin center policy managementOffice Cloud Policy Service Configuration GuideIT Operations and Cybersecurity • Office Cloud Policy Service configurationMicrosoft 365 User Provisioning Workflow GuideMicrosoft 365 • Microsoft 365 user provisioning workflowEntra ID Join vs Hybrid Join Planning GuideMicrosoft 365 • Entra ID Join vs Hybrid JoinMicrosoft Entra Device Registration Review GuideMicrosoft 365 • Microsoft Entra device registration reviewMicrosoft Entra Authentication Methods Policy Migration GuideMicrosoft 365 • Entra authentication methods policySecurity Defaults vs Conditional Access Decision GuideIT Operations and Cybersecurity • Security Defaults vs Conditional AccessMicrosoft Entra Named Locations Governance GuideMicrosoft 365 • Microsoft Entra named locations governanceMicrosoft Entra Sign-In Logs Operations Review GuideMicrosoft 365 • Microsoft Entra sign-in logs reviewMicrosoft Entra Dynamic Groups Design GuideMicrosoft 365 • Microsoft Entra dynamic groups designMicrosoft Entra Administrative Units Design GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft Entra administrative unitsMicrosoft Entra Access Packages Lifecycle GuideMicrosoft 365 • Microsoft Entra access packages lifecycleMicrosoft Entra Terms of Use Deployment GuideMicrosoft 365 • Microsoft Entra terms of use deploymentMicrosoft Entra Cross-Tenant Access Settings GuideMicrosoft 365 • Microsoft Entra cross-tenant access settingsMicrosoft 365 External Collaboration Settings Review GuideMicrosoft 365 • Microsoft 365 external collaboration settingsMicrosoft 365 Groups Expiration Policy GuideMicrosoft 365 • Microsoft 365 Groups expiration policyMicrosoft 365 Group Naming and Classification GuideMicrosoft 365 • Microsoft 365 group naming classificationMicrosoft Teams Lifecycle and Archiving Governance GuideMicrosoft 365 • Microsoft Teams lifecycle governanceMicrosoft Teams Channel Governance GuideMicrosoft 365 • Microsoft Teams channel governanceTeams Meeting Recording and Transcription Governance GuideMicrosoft 365 • Teams recording transcription governanceTeams External Federation Policy Review GuideMicrosoft 365 • Teams external federation policy reviewTeams App Permission Policy Review GuideMicrosoft 365 • Teams app permission policy reviewTeams Phone Number and Emergency Address Inventory GuideMicrosoft 365 • Teams Phone number emergency address inventorySharePoint Site Provisioning Governance GuideMicrosoft 365 • SharePoint site provisioning governanceSharePoint Hub Site Architecture GuideMicrosoft 365 • SharePoint hub site architectureSharePoint Site Owner Access Recertification GuideMicrosoft 365 • SharePoint site owner access recertificationSharePoint Sensitivity Labels for Sites and Teams GuideMicrosoft 365 • SharePoint sensitivity labels sites TeamsSharePoint Storage Quota and Archiving GuideMicrosoft 365 • SharePoint storage quota archivingOneDrive Known Folder Move Deployment GuideEndpoint Security, Microsoft 365 • OneDrive Known Folder Move deploymentOneDrive Sync Client Health Monitoring GuideEndpoint Security, Microsoft 365 • OneDrive sync client health monitoringOneDrive External Sharing Expiration Policy GuideEndpoint Security, Microsoft 365 • OneDrive external sharing expiration policyExchange Online Recipient Management RunbookMicrosoft 365 • Exchange Online recipient management runbookExchange Online Accepted Domains Documentation GuideIT Operations Management, Microsoft 365 • Exchange Online accepted domains documentationExchange Online Anti-Spam Policy Tuning GuideMicrosoft 365 • Exchange Online anti-spam policy tuningExchange Online Quarantine Operations GuideMicrosoft 365 • Exchange Online quarantine operationsDefender for Office 365 Safe Links Policy Design GuideMicrosoft 365 • Defender for Office 365 Safe Links policyDefender for Office 365 Safe Attachments Policy Design GuideMicrosoft 365 • Defender for Office 365 Safe Attachments policyDefender for Office 365 Attack Simulation Training Operations GuideMicrosoft 365 • Defender for Office 365 attack simulation trainingDefender for Office 365 Submission and False Positive Workflow GuideMicrosoft 365 • Defender for Office 365 submission workflowExchange Online Transport Rule Change Control GuideMicrosoft 365 • Exchange Online transport rule change controlMicrosoft Purview Information Barriers Planning GuideMicrosoft 365, Web and Application Security • Microsoft Purview information barriers planningMicrosoft Purview Insider Risk Management Readiness GuideMicrosoft 365 • Microsoft Purview insider risk readinessMicrosoft Purview Communication Compliance Readiness GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft Purview communication compliance readinessMicrosoft Purview eDiscovery Standard Operations GuideMicrosoft 365 • Microsoft Purview eDiscovery Standard operationsMicrosoft Purview Audit Premium Readiness GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft Purview Audit Premium readinessMicrosoft Purview Records Management Setup GuideMicrosoft 365 • Microsoft Purview records management setupMicrosoft Purview Data Lifecycle Management GuideMicrosoft 365 • Microsoft Purview data lifecycle managementMicrosoft 365 Retention vs Backup Decision GuideBackup and Disaster Recovery, Microsoft 365 • Microsoft 365 retention vs backupMicrosoft Defender XDR Incident Queue Operations GuideIT Operations and Cybersecurity • Microsoft Defender XDR incident queue operationsMicrosoft Defender XDR Advanced Hunting Starter GuideIT Operations and Cybersecurity • Microsoft Defender XDR advanced huntingDefender for Endpoint Device Grouping and RBAC GuideEndpoint Security • Defender for Endpoint device grouping RBACDefender for Endpoint Attack Surface Reduction Pilot GuideEndpoint Security • Defender for Endpoint ASR pilotDefender for Endpoint Vulnerability Remediation Workflow GuideEndpoint Security, Vulnerability Management • Defender Endpoint vulnerability remediation workflowMicrosoft Security Exposure Management Operations GuideIT Operations and Cybersecurity • Microsoft Security Exposure Management operationsDefender for Cloud Apps Shadow IT Discovery GuideIT Operations and Cybersecurity • Defender for Cloud Apps Shadow IT discoveryDefender for Cloud Apps Session Control GuideIT Operations and Cybersecurity • Defender for Cloud Apps session controlIntune Enrollment Platform Restrictions GuideMicrosoft 365, Web and Application Security • Intune enrollment platform restrictionsIntune Configuration Profile Naming Standards GuideMicrosoft 365 • Intune configuration profile naming standardsIntune Security Baseline Rollout GuideMicrosoft 365 • Intune security baseline rolloutIntune Endpoint Privilege Management Evaluation GuideEndpoint Security, Microsoft 365 • Intune Endpoint Privilege Management evaluationIntune App Protection Policies for BYOD GuideEndpoint Security, Microsoft 365 • Intune app protection policies BYODIntune Win32 App Packaging Workflow GuideMicrosoft 365 • Intune Win32 app packaging workflowIntune Device Cleanup Rules GuideMicrosoft 365 • Intune device cleanup rulesWindows Autopatch Readiness GuideIT Operations and Cybersecurity • Windows Autopatch readinessAzure Subscription Inventory and Ownership GuideMicrosoft Azure • Azure subscription inventory ownershipAzure Management Group Hierarchy Design GuideMicrosoft Azure • Azure management group hierarchy designAzure Resource Group Naming and Lifecycle GuideMicrosoft Azure • Azure resource group naming lifecycleAzure Tagging Strategy and Cost Allocation GuideMicrosoft Azure • Azure tagging strategy cost allocationAzure RBAC Least Privilege Review GuideMicrosoft Azure • Azure RBAC least privilege reviewAzure PIM for Azure Resources Operations GuideMicrosoft Azure • Azure PIM for Azure resourcesAzure Resource Locks Governance GuideMicrosoft Azure • Azure resource locks governanceAzure Advisor Recommendations Review GuideMicrosoft Azure • Azure Advisor recommendations reviewMicrosoft Defender for Cloud Secure Score Operations GuideMicrosoft 365 • Defender for Cloud secure score operationsDefender for Cloud Regulatory Compliance Dashboard GuideCompliance and Audit Readiness • Defender for Cloud regulatory compliance dashboardAzure Network Watcher Operations GuideMicrosoft Azure, Network Infrastructure • Azure Network Watcher operationsAzure NSG Flow Logs Analytics GuideMicrosoft Azure • Azure NSG flow logs analyticsAzure Private Link Planning GuideMicrosoft Azure • Azure Private Link planningAzure Firewall Policy Rule Collection Governance GuideMicrosoft Azure, Network Infrastructure • Azure Firewall policy rule collection governanceAzure Application Gateway WAF Operations GuideMicrosoft Azure, Web and Application Security • Azure Application Gateway WAF operationsAzure Virtual Network Peering Review GuideMicrosoft Azure, Network Infrastructure • Azure virtual network peering reviewAzure DNS Zone Governance GuideMicrosoft Azure, Network Infrastructure • Azure DNS zone governanceAzure Update Manager Operations GuideMicrosoft Azure • Azure Update Manager operationsAzure VM Backup Policy Review GuideBackup and Disaster Recovery, Microsoft Azure, Virtualization • Azure VM backup policy reviewAzure Disk Encryption and Customer-Managed Key Decision GuideMicrosoft Azure • Azure disk encryption customer-managed keyAzure Storage Lifecycle Management GuideMicrosoft Azure • Azure Storage lifecycle managementAzure Cost Management Budget Alerts GuideIT Operations Management, Microsoft Azure • Azure Cost Management budget alertsAzure Monitor Alert Processing Rules GuideMicrosoft Azure • Azure Monitor alert processing rulesLog Analytics Workspace Cost Optimization GuideIT Operations and Cybersecurity • Log Analytics workspace cost optimizationAzure Arc Server Onboarding Governance GuideMicrosoft Azure, Server Infrastructure • Azure Arc server onboarding governanceMicrosoft 365 and Azure Quarterly Business Review Report GuideMicrosoft 365, Microsoft Azure • Microsoft 365 Azure QBR reportHIPAA Security Rule Evidence Preparation for Medical OfficesCompliance and Audit Readiness • HIPAA security rule evidence preparationHIPAA Microsoft 365 Safeguards Readiness GuideCompliance and Audit Readiness, Microsoft 365 • HIPAA Microsoft 365 safeguardsHIPAA File Share and Endpoint Safeguards ReviewCompliance and Audit Readiness, Endpoint Security • HIPAA file share endpoint safeguardsHIPAA Backup and Recovery Evidence ReadinessBackup and Disaster Recovery, Compliance and Audit Readiness • HIPAA backup recovery evidenceHIPAA Vendor Access and BAA Readiness GuideCompliance and Audit Readiness, IT Operations Management • HIPAA vendor access BAA readinessPCI DSS Network Segmentation Evidence PreparationCompliance and Audit Readiness, Network Infrastructure • PCI DSS network segmentation evidencePCI DSS Firewall Rule Evidence PreparationCompliance and Audit Readiness, Network Infrastructure • PCI DSS firewall rule evidencePCI DSS Remote Access and MFA Evidence GuideCompliance and Audit Readiness, Identity and Access Management • PCI DSS remote access MFA evidencePCI DSS Endpoint and Patch Evidence ReadinessCompliance and Audit Readiness, Endpoint Security • PCI DSS endpoint patch evidencePCI DSS Logging and Vulnerability Scan Evidence GuideCompliance and Audit Readiness, Vulnerability Management • PCI DSS logging vulnerability scan evidenceSOC 2 IT Operations Evidence MapCompliance and Audit Readiness • SOC 2 IT operations evidenceSOC 2 Access Control Evidence Collection GuideCompliance and Audit Readiness • SOC 2 access control evidenceSOC 2 Change Management Evidence GuideCompliance and Audit Readiness • SOC 2 change management evidenceSOC 2 Vendor Management Evidence GuideCompliance and Audit Readiness, IT Operations Management • SOC 2 vendor management evidenceSOC 2 Backup and Availability Evidence GuideBackup and Disaster Recovery, Compliance and Audit Readiness • SOC 2 backup availability evidenceNIST CSF Cybersecurity Roadmap for Business ITCompliance and Audit Readiness • NIST CSF cybersecurity roadmapNIST CSF Identify Function Evidence GuideCompliance and Audit Readiness • NIST CSF Identify evidenceNIST CSF Protect Function Controls GuideCompliance and Audit Readiness • NIST CSF Protect controlsNIST CSF Detect Function Logging GuideCompliance and Audit Readiness • NIST CSF Detect loggingNIST CSF Respond and Recover Tabletop GuideCompliance and Audit Readiness • NIST CSF Respond Recover tabletopISO 27001 IT Operations Evidence GuideCompliance and Audit Readiness • ISO 27001 IT operations evidenceISO 27001 Asset Inventory Evidence GuideCompliance and Audit Readiness, IT Operations Management • ISO 27001 asset inventory evidenceISO 27001 Access Control Gap Preparation GuideCompliance and Audit Readiness • ISO 27001 access control gapsISO 27001 Supplier Security Evidence GuideCompliance and Audit Readiness • ISO 27001 supplier security evidenceISO 27001 Logging and Monitoring Evidence GuideCompliance and Audit Readiness • ISO 27001 logging monitoring evidenceCMMC Level 1 Evidence Preparation GuideCompliance and Audit Readiness • CMMC Level 1 evidence preparationCMMC Level 2 Control Mapping for IT OperationsCompliance and Audit Readiness • CMMC Level 2 control mappingCMMC Microsoft 365 Control Evidence GuideCompliance and Audit Readiness, Microsoft 365 • CMMC Microsoft 365 control evidenceCMMC Endpoint and Patch Evidence GuideCompliance and Audit Readiness, Endpoint Security • CMMC endpoint patch evidenceCMMC Audit Trail and SIEM Evidence GuideCompliance and Audit Readiness • CMMC audit trail SIEM evidenceCyber Insurance MFA Evidence Preparation GuideCompliance and Audit Readiness, Identity and Access Management • cyber insurance MFA evidenceCyber Insurance EDR and Antivirus Evidence GuideCompliance and Audit Readiness, Endpoint Security • cyber insurance EDR evidenceCyber Insurance Backup and Recovery Evidence GuideBackup and Disaster Recovery, Compliance and Audit Readiness • cyber insurance backup recovery evidenceCyber Insurance Vulnerability Management Evidence GuideCompliance and Audit Readiness, Vulnerability Management • cyber insurance vulnerability management evidenceCyber Insurance Incident Response Evidence GuideCompliance and Audit Readiness • cyber insurance incident response evidenceInternal Security Audit Pre-Assessment GuideCompliance and Audit Readiness • internal security audit pre-assessmentActive Directory Audit Evidence Preparation GuideCompliance and Audit Readiness, Identity and Access Management • Active Directory audit evidence preparationFirewall and VPN Audit Evidence Preparation GuideCompliance and Audit Readiness, Network Infrastructure • firewall VPN audit evidenceEndpoint and Patch Audit Evidence Preparation GuideCompliance and Audit Readiness, Endpoint Security • endpoint patch audit evidenceBackup and Recovery Audit Evidence Preparation GuideBackup and Disaster Recovery, Compliance and Audit Readiness • backup recovery audit evidenceExternal Attack Surface Audit Preparation GuideCompliance and Audit Readiness • external attack surface audit preparationPublic DNS and Domain Records Audit Preparation GuideCompliance and Audit Readiness, Network Infrastructure • public DNS domain records auditRemote Access Exposure Audit Preparation GuideCompliance and Audit Readiness • remote access exposure auditWeb SSL and Public Server Audit Evidence GuideCompliance and Audit Readiness, Server Infrastructure, Web and Application Security • web SSL public server audit evidenceCloud Perimeter Audit Evidence Preparation GuideCompliance and Audit Readiness • cloud perimeter audit evidenceMicrosoft 365 Identity Audit Evidence GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft 365 identity audit evidenceExchange Online Email Protection Audit Evidence GuideCompliance and Audit Readiness, Microsoft 365 • Exchange Online email protection audit evidenceSharePoint and OneDrive Sharing Audit Evidence GuideCompliance and Audit Readiness, Endpoint Security, Microsoft 365 • SharePoint OneDrive sharing audit evidenceTeams Guest Access Audit Evidence GuideCompliance and Audit Readiness, Microsoft 365 • Teams guest access audit evidenceMicrosoft Purview DLP and Retention Audit Evidence GuideCompliance and Audit Readiness, Microsoft 365 • Microsoft Purview DLP retention audit evidenceAzure RBAC Audit Evidence Preparation GuideCompliance and Audit Readiness, Microsoft Azure • Azure RBAC audit evidenceAzure Network Security Group Audit Evidence GuideCompliance and Audit Readiness, Microsoft Azure, Network Infrastructure • Azure NSG audit evidenceAzure Storage Exposure Audit Evidence GuideCompliance and Audit Readiness, Microsoft Azure • Azure storage exposure audit evidenceAzure Virtual Machine Security Audit Evidence GuideCompliance and Audit Readiness, Microsoft Azure, Virtualization • Azure VM security audit evidenceAzure Logging and Microsoft Sentinel Evidence GuideCompliance and Audit Readiness, Microsoft Azure • Azure logging Sentinel evidenceFirewall NAT and Port Forwarding Audit Evidence GuideCompliance and Audit Readiness, Network Infrastructure • firewall NAT port forwarding audit evidenceVPN User Access and MFA Audit Evidence GuideCompliance and Audit Readiness, Identity and Access Management, Network Infrastructure • VPN user access MFA audit evidenceFirewall Subscription and Threat Prevention Evidence GuideCompliance and Audit Readiness, Network Infrastructure • firewall subscription threat prevention evidenceFirewall Rule Recertification Workflow GuideNetwork Infrastructure • firewall rule recertification workflowFirewall Logging and SIEM Evidence Preparation GuideCompliance and Audit Readiness, Network Infrastructure • firewall logging SIEM evidencevCISO Governance Roadmap Landing PageIT Operations and Cybersecurity • vCISO governance roadmapSecurity Steering Committee Operating Model GuideIT Operations and Cybersecurity • security steering committee operating modelRisk Register Operating Model for IT ManagersIT Operations Management • risk register operating modelCybersecurity Board Reporting Package GuideIT Operations and Cybersecurity • cybersecurity board reporting packageSecurity Policy Review and Ownership GuideIT Operations and Cybersecurity • security policy review ownershipVulnerability Scanning Program Design GuideVulnerability Management • vulnerability scanning program designVulnerability Remediation Prioritization GuideVulnerability Management • vulnerability remediation prioritizationScan Credential Governance GuideIT Operations and Cybersecurity • scan credential governanceCVE and CISA KEV Remediation Roadmap GuideVulnerability Management • CVE CISA KEV remediation roadmapVulnerability Executive Reporting GuideVulnerability Management • vulnerability executive reportingRansomware Readiness Gap Preparation GuideIT Operations and Cybersecurity • ransomware readiness gap preparationRansomware Backup Isolation Evidence GuideBackup and Disaster Recovery, Compliance and Audit Readiness • ransomware backup isolation evidenceRansomware Lateral Movement Control ReviewIT Operations and Cybersecurity • ransomware lateral movement controlRansomware Recovery Tabletop Evidence GuideBackup and Disaster Recovery, Compliance and Audit Readiness • ransomware recovery tabletop evidenceRansomware Endpoint Detection Evidence GuideCompliance and Audit Readiness, Endpoint Security • ransomware endpoint detection evidenceIncident Response Evidence Package GuideCompliance and Audit Readiness • incident response evidence packageIncident Communication Plan for Executives GuideIT Operations and Cybersecurity • incident communication plan executivesIncident Log Preservation and Timeline GuideIT Operations and Cybersecurity • incident log preservation timelinePost-Incident Improvement Roadmap GuideIT Operations and Cybersecurity • post-incident improvement roadmapDigital Forensics Readiness Guide for Business ITIT Operations and Cybersecurity • digital forensics readinessSensitive Data Discovery Audit Preparation GuideCompliance and Audit Readiness • sensitive data discovery audit preparationData Classification and Access Review Audit GuideCompliance and Audit Readiness • data classification access review auditDLP Audit Evidence Preparation GuideCompliance and Audit Readiness • DLP audit evidence preparationFile Share Permission Audit Preparation GuideCompliance and Audit Readiness • file share permission audit preparationEncryption Evidence for Compliance Readiness GuideCompliance and Audit Readiness • encryption evidence compliance readinessWi-Fi Security Audit Preparation GuideCompliance and Audit Readiness, Network Infrastructure • Wi-Fi security audit preparationGuest Wi-Fi Segmentation Audit Evidence GuideCompliance and Audit Readiness, Network Infrastructure • guest Wi-Fi segmentation audit evidenceWireless Controller Policy Evidence GuideCompliance and Audit Readiness, Network Infrastructure • wireless controller policy evidenceRemote Workforce Security Audit Preparation GuideCompliance and Audit Readiness • remote workforce security audit preparationVPN and ZTNA Access Review Evidence GuideCompliance and Audit Readiness, Network Infrastructure • VPN ZTNA access review evidenceVendor Risk Assessment Preparation GuideIT Operations Management • vendor risk assessment preparationMSP and MSSP Security Oversight GuideIT Operations and Cybersecurity • MSP MSSP security oversightThird-Party Remote Access Audit GuideCompliance and Audit Readiness • third-party remote access auditBackup Vendor Recovery Evidence GuideBackup and Disaster Recovery, Compliance and Audit Readiness, IT Operations Management • backup vendor recovery evidenceCloud and SaaS Security Assessment Preparation GuideIT Operations and Cybersecurity • cloud SaaS security assessment preparationSecurity Awareness Audit Evidence GuideCompliance and Audit Readiness • security awareness audit evidencePhishing Simulation Program Evidence GuideCompliance and Audit Readiness • phishing simulation evidencePhysical Security and Server Room Audit Preparation GuideCompliance and Audit Readiness, Physical and IoT Security, Server Infrastructure • physical server room audit preparationIT Documentation Audit Readiness GuideCompliance and Audit Readiness, IT Operations Management • IT documentation audit readinessCompliance Audit Readiness Master RoadmapCompliance and Audit Readiness • compliance audit readiness roadmap

Important disclaimer

This tool is for initial guidance only and does not replace a professional IT assessment, cybersecurity audit, compliance assessment, penetration test, legal review, or formal risk assessment. Your answers are processed in your browser. Use the results as a starting point for review, planning, validation, and follow-up with qualified IT or cybersecurity professionals.

Ali Hassani CISO and IT cybersecurity consultant

Created by Ali Hassani

Practical IT operations guidance from a CISO and infrastructure leader.

Ali Hassani is a CISO, cybersecurity and IT consultant, and IT infrastructure leader with 25+ years of experience helping organizations manage Microsoft infrastructure, networks, servers, cloud services, cybersecurity controls, documentation, and operational risk. His credentials include CISSP, CCISO, CCNP, CCNA, MCSE, MCSA Security, MCITP, MCP, and MCTS.

Certification logo CCISO-vCiso-Certification-ITsecurityCertification logo ccnp-Cisco-Certified-Routing-SwitchingCertification logo cisco-certified-network-associate-routing-and-switching-ccna-routing-and-switchingCertification logo CISSPCertification logo Microsoft-Certified-Solutions-Expert-1Certification logo microsoft-certified-systems-administrator-1Certification logo Microsoft-Certified-Systems-Engineer
About Ali HassaniContact IT Perfection

Need help turning the report into action?

IT Perfection can help with managed IT, co-managed IT, Microsoft 365, Azure, endpoint management, backup, server, network, documentation, monitoring, and remediation follow-through. For cybersecurity audits, compliance readiness, and vCISO support, the report can also point to OC Security Audit resources.

Schedule an IT ReviewOC Security Audit Tools